@counterfact-labs/cli 0.2.4 → 0.2.5

package/dist/contract/messages.js

@@ -1,13 +1,14 @@
 import { z } from "zod";
+import { analysisRelease } from "./engine.js";
 import { executionRequest } from "../analysis-core/contracts/requests.js";
-import { checkRuntimeEnvironment } from "./runtime-environment.js";
+import { compactJwtPattern, hexChallenge } from "./attestation.js";
+export { PRODUCTION_EVIDENCE_VERSION, RELAY_CHANNEL_AUDIENCE, RELAY_PORT, RELAY_URL, RELAY_HEALTH_PATH, RELAY_HEALTH_URL, GOOGLE_ATTESTATION_ISSUER, MAX_ATTESTATION_BYTES, attestationChallenge, productionEvidence, evidenceBinding, googleAttestationClaims, observedAttestationClaims, probeAttestationClaims, attestationClaims } from "./attestation.js";
 /**
  * The messages that cross between the customer's machine and the sealed relay. This module is the only owner of
- * their shape: the relay, the gatekeeper and the bundle tooling all import these schemas and never redefine them.
+ * their analysis shape: the relay, the gatekeeper and the bundle tooling import these schemas and never redefine them.
+ * Public identity schemas are owned by attestation.ts and re-exported here for existing consumers.
  * Design: docs/design/sealed-model-relay.md and docs/design/relay-contract.md.
  */
-const compactJwtPattern = /^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/;
-const hexChallenge = z.string().length(64).regex(/^[0-9a-f]+$/);
 /** The wire adds routing identity to the core's data-only execution envelope. */
 export const relayRequest = executionRequest.extend({
     bundleVersion: z.string().min(1).max(128),
@@ -125,102 +126,13 @@ export const relayHealthResponse = z.discriminatedUnion("ok", [
         code: z.enum(["bad_request", "unavailable"]),
     }).strict(),
 ]);
-export const PRODUCTION_EVIDENCE_VERSION = 1;
-export const RELAY_CHANNEL_AUDIENCE = "https://relay.counterfactlabs.com";
-// Passthrough forwarding keeps the non-root workload's listener port unchanged.
-export const RELAY_PORT = 8443;
-export const RELAY_URL = `${RELAY_CHANNEL_AUDIENCE}:${RELAY_PORT}`;
-export const RELAY_HEALTH_PATH = "/health";
-export const RELAY_HEALTH_URL = `${RELAY_URL}${RELAY_HEALTH_PATH}`;
-export const GOOGLE_ATTESTATION_ISSUER = "https://confidentialcomputing.googleapis.com";
-export const MAX_ATTESTATION_BYTES = 32 * 1024;
-export const attestationChallenge = z.object({
-    version: z.literal(PRODUCTION_EVIDENCE_VERSION),
-    challenge: hexChallenge,
-}).strict();
-export const productionEvidence = z.object({
-    version: z.literal(PRODUCTION_EVIDENCE_VERSION),
-    token: z.string().max(MAX_ATTESTATION_BYTES).regex(compactJwtPattern),
-}).strict();
-/** Google's launcher accepts up to six caller nonces, each at most 74 characters. */
-export const evidenceBinding = z.object({
-    audience: z.string().min(1).max(256).regex(/^[A-Za-z0-9:/._-]+$/),
-    nonces: z.array(z.string().min(1).max(74).regex(/^[A-Za-z0-9_:-]+$/)).min(1).max(6),
-}).strict();
-/** Native claims are interpreted only after the PKI chain and token signature are authenticated. */
-export const googleAttestationClaims = z.object({
-    iss: z.literal(GOOGLE_ATTESTATION_ISSUER),
-    aud: z.string(),
-    sub: z.string(),
-    iat: z.number().int(),
-    nbf: z.number().int(),
-    exp: z.number().int(),
-    eat_nonce: z.union([z.string(), z.array(z.string()).min(1).max(6)]),
-    secboot: z.literal(true),
-    dbgstat: z.literal("disabled-since-boot"),
-    oemid: z.literal(11129),
-    hwmodel: z.string(),
-    swname: z.literal("CONFIDENTIAL_SPACE"),
-    swversion: z.array(z.string()).length(1),
-    google_service_accounts: z.array(z.string()).min(1),
-    development: z.never().optional(),
-    identity: z.never().optional(),
-    submods: z.object({
-        confidential_space: z.object({
-            support_attributes: z.array(z.string()),
-            monitoring_enabled: z.object({ memory: z.literal(false) }).passthrough(),
-        }).passthrough(),
-        container: z.object({
-            image_digest: z.string().regex(/^sha256:[0-9a-f]{64}$/),
-            image_signatures: z.array(z.object({
-                key_id: z.string(), signature: z.string().min(1),
-                signature_algorithm: z.literal("RSASSA_PSS_SHA256"),
-            }).passthrough()).min(1),
-            // Google omits both override claims when nothing was overridden; when present they must still be empty.
-            cmd_override: z.array(z.unknown()).length(0).optional(),
-            env_override: z.object({}).strict().optional(),
-            // Real tokens list the container's own environment; the relay's start-up rule decides which settings are allowed.
-            env: z.record(z.string(), z.string()).refine(env => {
-                try {
-                    checkRuntimeEnvironment(env);
-                    return true;
-                }
-                catch {
-                    return false;
-                }
-            }),
-        }).passthrough(),
-    }).passthrough(),
-}).passthrough();
-/** Authenticated observations describe a refused workload without granting it an admitted identity. */
-export const observedAttestationClaims = googleAttestationClaims.extend({
-    dbgstat: z.string(),
-    submods: googleAttestationClaims.shape.submods.extend({
-        container: googleAttestationClaims.shape.submods.shape.container.extend({
-            image_signatures: z.array(googleAttestationClaims.shape.submods.shape.container.shape.image_signatures.element),
-            cmd_override: z.array(z.unknown()).optional(),
-            env_override: z.record(z.string(), z.unknown()).optional(),
-        }),
-    }),
-});
-/**
- * Local development claims. These cannot establish production identity; production uses native Google claims.
- */
-export const attestationClaims = z.object({
-    iss: z.string().url(),
-    /** The relay image's digest. Must be one we published. */
-    imageDigest: z.string().regex(/^sha256:[0-9a-f]{64}$/),
-    /** Hash of the relay's channel public key, so the token is bound to this connection. */
-    channelKeyHash: z.string().regex(/^[0-9a-f]{64}$/),
-    exp: z.number().int(),
-    iat: z.number().int(),
-}).passthrough();
 const assetMetadata = z.object({
     /** HMAC-SHA256 keyed by a secret stored only in the encrypted payload. */
     fingerprint: z.string().regex(/^[0-9a-f]{64}$/),
     size: z.number().int().nonnegative(),
 }).strict();
 export const bundleMetadata = z.object({
+    analysis: analysisRelease.optional(),
     templates: z.record(z.string().min(1), assetMetadata.extend({
         role: z.enum(["required", "optional"]),
         answerFormats: z.array(z.string().min(1)).min(1),

package/dist/contract/public-report.js

@@ -0,0 +1 @@
+export { projectPublicFinding, projectPublicReport, unredactedAnswer, publicReportSchema } from "../analysis-core/contracts/relay-analysis.js";

package/dist/contract/runtime-environment.js

@@ -1,12 +1,23 @@
 // The pinned distroless base image sets SSL_CERT_FILE to its bundled certificates. The relay accepts exactly that
 // value, so the image works while no operator setting can point the relay at a different trust store.
 export const BASE_CERTIFICATE_FILE = "/etc/ssl/certs/ca-certificates.crt";
+export const runtimeIdentities = Object.freeze({ loader: 65532, engine: 65533 });
 const fixedValues = Object.freeze({ SSL_CERT_FILE: BASE_CERTIFICATE_FILE });
+export const relayRawClockSetting = Object.freeze({ name: "COUNTERFACT_RELAY_RAW_CLOCK", value: "1" });
+export const allowedRuntimeOverrides = Object.freeze({
+    [relayRawClockSetting.name]: relayRawClockSetting.value,
+});
+/** Only the clock rollback setting may differ from the signed image's environment. */
+export function allowsRuntimeOverrides(overrides) {
+    return Object.entries(overrides).every(([name, value]) => Object.hasOwn(allowedRuntimeOverrides, name) && allowedRuntimeOverrides[name] === value);
+}
 // Native startup consumes these data, so loader checks have the same owner as runtime checks.
 export const runtimeEnvironmentPolicy = Object.freeze({
     fixedValues,
+    forwardedValues: Object.entries(allowedRuntimeOverrides).map(([name, value]) => `${name}=${value}`),
     forbiddenPrefixes: ["CF_RELAY_", "ANTHROPIC_", "GOOGLE_AUTH_", "LD_"],
-    forbiddenNames: ["GOOGLE_APPLICATION_CREDENTIALS", "NODE_OPTIONS", "NODE_USE_ENV_PROXY", "NODE_EXTRA_CA_CERTS",
+    forbiddenNames: ["GOOGLE_APPLICATION_CREDENTIALS", "NODE_OPTIONS", "NODE_V8_COVERAGE", "NODE_COMPILE_CACHE", "NODE_REDIRECT_WARNINGS", "NODE_DEBUG", "NODE_DEBUG_NATIVE",
+        "NODE_USE_ENV_PROXY", "NODE_EXTRA_CA_CERTS",
         "NODE_TLS_REJECT_UNAUTHORIZED", "SSL_CERT_DIR", "GLIBC_TUNABLES", "GCONV_PATH"],
     forbiddenNamesIgnoringCase: ["http_proxy", "https_proxy", "all_proxy"],
 });

package/dist/core/analysis/run-to-end.js

@@ -1,55 +1,10 @@
-import { JobError } from "../../analysis-core/errors.js";
-import { readAnalysisFlags } from "../../analysis-core/analysis/analysis-flags.js";
-import { mapStage, inspectStage, sourceNotesStage, headlinesStage, applyAnalysisDelta, buildAnalysisResult } from "../../analysis-core/index.js";
-import { readFindingQualityConfig } from "./finding-quality/config.js";
-import { buildLocalReport } from "../../adapters/report.js";
-import { runStructures } from "./structural-run.js";
+import { NO_PROGRESS } from "../../analysis-core/stages/execution-ports.js";
+import { runEngineAnalysis } from "../../analysis-core/stages/engine-entry.js";
 import { analysisExecution } from "../../adapters/models.js";
-/** Keep the hosted stage order while holding source files and results only in memory. */
+/** Product startup selects ports; the shared runner owns the stage order. */
 export async function runAnalysisToEnd(input, model, settings = {}, options = {}) {
-    const execution = await analysisExecution(model, options, settings);
-    const { model: llm, requestTools: tools } = execution;
-    const flags = readAnalysisFlags(settings);
-    const qualityConfig = readFindingQualityConfig(settings, tools);
-    if (!Object.keys(input.files).length)
-        throw new JobError("empty_folder", "No admitted source files were found.");
-    let prepared = { repos: [{ key: input.repoKey, kind: "fs", files: input.files, ...(input.root !== undefined ? { root: input.root } : {}) }],
-        warnings: input.warnings ?? [], ...(input.fragment ? { mapped: [input.fragment] } : {}) };
-    const ports = { readers: [], model: llm, instructions: execution.instructions, requestTools: async () => tools, context: {},
-        progress: { checkpoint: async () => { }, assertHeld: () => { }, elapsedMs: () => 0, log: () => { } } };
-    for (;;) {
-        const delta = await mapStage({ phase: "mapping", state: prepared, settings, execution: { scopeConcurrency: 4, forLocal: true,
-                preparation: { capUsd: 20, confirmPrice: false, qualityConfig } } }, ports);
-        prepared = applyAnalysisDelta(prepared, delta);
-        if (delta.next !== "mapping")
-            break;
-    }
-    prepared = { ...prepared, analysisFlags: { ...flags, sourceNotes: !options.findingsOnly && flags.sourceNotes },
-        findingQuality: { config: qualityConfig }, warnings: [...(prepared.warnings ?? []), ...qualityConfig.diagnostics] };
-    let phase = "inspecting";
-    ports.progress.checkpoint = async (fields, part) => {
-        prepared = { ...prepared, ...fields, ...(part ? { passResults: { ...prepared.passResults, [part.index]: part.result } } : {}) };
-    };
-    while (phase !== "structuring") {
-        const step = phase === "inspecting" ? inspectStage : sourceNotesStage;
-        const delta = await step({ phase, state: prepared, settings, execution: { scopeConcurrency: 4, passConcurrency: 4, forLocal: true } }, ports);
-        prepared = applyAnalysisDelta(prepared, delta);
-        phase = delta.next;
-    }
-    const output = () => buildAnalysisResult({ phase: "persisting", state: prepared, settings, execution: { scopeConcurrency: 4 } });
-    // Structural child references index the local display order, including optional ranking.
-    const report = buildLocalReport(input.repoKey, output(), prepared);
-    if (!options.findingsOnly) {
-        const findingsRaw = prepared.findingsRaw;
-        const structural = await runStructures(settings, llm, { repos: prepared.repos,
-            fragments: [{ repoKey: input.repoKey, fragment: prepared.mapped[0] }],
-            graph: report.graph, findings: report.findings, state: prepared }, { execution });
-        // Structural child references keep display order; wording uses the original cleaned order.
-        prepared = { ...structural.state, findingsRaw };
-    }
-    prepared = applyAnalysisDelta(prepared, await headlinesStage({ phase: "persisting", state: prepared, settings,
-        execution: { scopeConcurrency: 4, forLocal: true } }, ports));
-    const result = output();
-    await options.resultSink?.(result);
-    return buildLocalReport(input.repoKey, result, prepared);
+    const execution = await analysisExecution(model, options);
+    return runEngineAnalysis({ ...input, settings }, { ...execution,
+        progress: NO_PROGRESS,
+    }, options);
 }

package/dist/gatekeeper/attestation.js

@@ -1,6 +1,6 @@
 import { createHash, verify } from "node:crypto";
 import { z } from "zod";
-import { MAX_ATTESTATION_BYTES, attestationClaims } from "../contract/messages.js";
+import { MAX_ATTESTATION_BYTES, attestationClaims } from "../contract/attestation.js";
 import { decodeBase64url } from "../transport/base64url.js";
 export function attestationPolicy(settings, trust) {
     return { ...trust, allowDevelopment: settings.CF_RELAY_DEV === "1" };

package/dist/gatekeeper/channel-binding.js

@@ -0,0 +1,15 @@
+import { PRODUCTION_EVIDENCE_VERSION, RELAY_CHANNEL_AUDIENCE, attestationChallenge } from "../contract/attestation.js";
+import { AttestationError } from "./attestation.js";
+/** Both peers supply bytes from their actual TLS socket; the transport owns freshness and socket reuse. */
+export function channelEvidenceBinding(binding) {
+    try {
+        attestationChallenge.parse({ version: PRODUCTION_EVIDENCE_VERSION, challenge: binding.challenge });
+        if (!(binding.exportedKeyMaterial instanceof Uint8Array) || binding.exportedKeyMaterial.byteLength !== 32)
+            throw new Error();
+        return { audience: RELAY_CHANNEL_AUDIENCE,
+            nonces: [Buffer.from(binding.exportedKeyMaterial).toString("base64url"), binding.challenge] };
+    }
+    catch {
+        throw new AttestationError("Invalid production attestation channel binding");
+    }
+}

package/dist/gatekeeper/cli-api.js

@@ -4,6 +4,8 @@ import { consoleSchemeAllowed } from "../contract/console-url.js";
 import { cliApiMessages } from "../contract/cli-api-messages.js";
 import { emailSignInMessages } from "../contract/email-sign-in-messages.js";
 import { CLI_BODY_LIMIT } from "../cli/api-types.js";
+import { findingNumberParamsSchema } from "../contract/findings.js";
+import { claimFixRequestBodySchema, claimFixRequestParamsSchema } from "../contract/fix-requests.js";
 export { DEFAULT_CONSOLE_URL as DEFAULT_URL } from "../setup-pings/client.js";
 export class ApiError extends Error {
     status;
@@ -36,6 +38,14 @@ function retryAfterMs(value, rejectNegativeSeconds = false) {
     return Number.isFinite(date) ? Math.max(0, date - Date.now()) : undefined;
 }
 function requestBody(path, body, emailRoute) {
+    if (path === "fix-requests" && body === undefined)
+        return undefined;
+    const lookup = /^projects\/([^/]+)\/findings\/([^/]+)$/.exec(path);
+    if (lookup && body === undefined && findingNumberParamsSchema.safeParse({ projectId: lookup[1], seq: lookup[2] }).success)
+        return undefined;
+    const claim = /^fix-requests\/([^/]+)\/claim$/.exec(path);
+    if (claim && claimFixRequestParamsSchema.safeParse({ id: claim[1] }).success && claimFixRequestBodySchema.safeParse(body).success)
+        return {};
     if ((path === "balance" || path === "checks/mode" || /^findings\/[a-zA-Z0-9_-]+$/.test(path)) && body === undefined)
         return undefined;
     if (body && typeof body === "object" && !Array.isArray(body)) {
@@ -95,7 +105,7 @@ export class ApiClient {
             throw new Error("COUNTERFACT_URL must be an HTTP or HTTPS address without credentials or query fields.");
         this.baseUrl = url.href.replace(/\/+$/, "");
     }
-    async request(path, body, authenticated = true) {
+    async request(path, body, authenticated = true, options = {}) {
         const emailRoute = Object.hasOwn(emailRoutes, path) ? emailRoutes[path] : undefined;
         const throwIfAborted = () => {
             if (emailRoute && this.signal?.aborted)
@@ -119,7 +129,7 @@ export class ApiClient {
         }
         const controller = new AbortController();
         const cancel = () => controller.abort(this.signal?.reason);
-        const timeout = setTimeout(() => controller.abort(), 120_000);
+        const timeout = setTimeout(() => controller.abort(), options.timeoutMs ?? 120_000);
         timeout.unref();
         this.signal?.addEventListener("abort", cancel, { once: true });
         try {

package/dist/gatekeeper/connection-exchange.js

@@ -1,8 +1,21 @@
 import { RELAY_MAX_FRAME_BYTES, deliveryReceipt, relayAnswer, relayAnswerFrame, relayRequest } from "../contract/messages.js";
+import { unredactedAnswer } from "../contract/public-report.js";
 export class RelayConnectionError extends Error {
     name = "RelayConnectionError";
     constructor() { super("Relay connection failed"); }
 }
+/** Both carriers retry the same confirmation, never another paid request. */
+export async function acknowledgeDelivery(options, confirmation) {
+    for (let attempt = 0; attempt < 2; attempt++) {
+        options.valid();
+        const receipt = await options.exchange("/delivery", confirmation, 1024);
+        if (receipt.status === 200) {
+            deliveryReceipt.parse(receipt.body);
+            return;
+        }
+    }
+    throw new RelayConnectionError();
+}
 /** Calls and delivery retries share the authenticated transport and run in input order. */
 export function createRelayExchange(options) {
     let queue = Promise.resolve();
@@ -18,23 +31,14 @@ export function createRelayExchange(options) {
             const frame = legacy?.success ? { answer: legacy.data, delivery: undefined } : relayAnswerFrame.parse(response.body);
             if (frame.answer.nonce !== request.nonce)
                 throw new Error();
+            if (frame.answer.ok)
+                unredactedAnswer(frame.answer);
             if (frame.delivery) {
                 const { confirmation } = frame.delivery;
                 if (confirmation.callId !== request.callId)
                     throw new Error();
                 // The relay enforces its deadline on its own clock; local clock drift must not discard a paid answer.
-                let acknowledged = false;
-                for (let attempt = 0; attempt < 2; attempt++) {
-                    options.valid();
-                    const receipt = await options.exchange("/delivery", confirmation, 1024);
-                    if (receipt.status === 200) {
-                        deliveryReceipt.parse(receipt.body);
-                        acknowledged = true;
-                        break;
-                    }
-                }
-                if (!acknowledged)
-                    throw new Error();
+                await acknowledgeDelivery(options, confirmation);
             }
             return frame.answer;
         }

package/dist/gatekeeper/model.js

@@ -1,4 +1,5 @@
 import { createHash, randomUUID } from "node:crypto";
+import { unredactedAnswer } from "../contract/public-report.js";
 import { executionRequest } from "../analysis-core/contracts/requests.js";
 export class ModelConfigurationError extends Error {
     name = "ModelConfigurationError";
@@ -62,7 +63,7 @@ export function relayModel(options) {
                 catch {
                     // A failed counter must not discard an answer or expose the sink's error text.
                 }
-                return reply.answer;
+                return unredactedAnswer(reply);
             },
         };
     }

package/dist/gatekeeper/production-attestation.js

@@ -1,11 +1,13 @@
 import { constants, verify, X509Certificate } from "node:crypto";
 import { z } from "zod";
-import { GOOGLE_ATTESTATION_ISSUER, MAX_ATTESTATION_BYTES, PRODUCTION_EVIDENCE_VERSION, RELAY_CHANNEL_AUDIENCE, attestationChallenge, evidenceBinding, googleAttestationClaims, observedAttestationClaims, productionEvidence } from "../contract/messages.js";
+import { GOOGLE_ATTESTATION_ISSUER, MAX_ATTESTATION_BYTES, PRODUCTION_EVIDENCE_VERSION, evidenceBinding, googleAttestationClaims, observedAttestationClaims, probeAttestationClaims, productionEvidence } from "../contract/attestation.js";
 import { decodeBase64url } from "../transport/base64url.js";
 import { isApprovedHardware } from "./trust/hardware.js";
 import { AttestationError } from "./attestation.js";
 import { validateCertificatePath } from "./certificate-path.js";
 import { validateProductionTrust, validateWorkloadPolicy } from "./trust/policy.js";
+import { channelEvidenceBinding } from "./channel-binding.js";
+export { channelEvidenceBinding } from "./channel-binding.js";
 /** A published client needs every trust constraint configured before it can connect to production. */
 export function assertProductionTrustConfigured(value) {
     try {
@@ -20,19 +22,6 @@ const headerSchema = z.object({
     alg: z.literal("RS256"), typ: z.literal("JWT").optional(), kid: z.string().max(256).optional(),
     x5c: z.array(z.string().min(1).max(8192)).min(1).max(5),
 }).strict();
-/** Both peers supply bytes from their actual TLS socket; the transport owns freshness and socket reuse. */
-export function channelEvidenceBinding(binding) {
-    try {
-        attestationChallenge.parse({ version: PRODUCTION_EVIDENCE_VERSION, challenge: binding.challenge });
-        if (!(binding.exportedKeyMaterial instanceof Uint8Array) || binding.exportedKeyMaterial.byteLength !== 32)
-            throw new Error();
-        return { audience: RELAY_CHANNEL_AUDIENCE,
-            nonces: [Buffer.from(binding.exportedKeyMaterial).toString("base64url"), binding.challenge] };
-    }
-    catch {
-        throw new AttestationError("Invalid production attestation channel binding");
-    }
-}
 /** The caller's binding comes from the channel/health/action owner, never from the token being verified. */
 export async function verifyProductionEvidence(token, binding, trust, now = Math.floor(Date.now() / 1000)) {
     let validated;
@@ -57,6 +46,20 @@ export async function verifyWorkloadEvidence(token, binding, policy, now = Math.
     }
     return verifyEvidence(token, binding, validated, now);
 }
+/** Bootstrap may bound this candidate before verification; it is never an authenticated time sample. */
+export function unverifiedEvidenceIssueTime(token) {
+    try {
+        productionEvidence.parse({ version: PRODUCTION_EVIDENCE_VERSION, token });
+        const candidate = JSON.parse(decodeBase64url(token.split(".")[1]).toString("utf8"));
+        const iat = candidate?.iat;
+        if (typeof iat !== "number" || !Number.isSafeInteger(iat) || !Number.isSafeInteger(iat * 1000))
+            throw new Error();
+        return iat;
+    }
+    catch {
+        throw new AttestationError("Malformed production attestation evidence");
+    }
+}
 async function authenticate(token, binding, roots, now) {
     try {
         productionEvidence.parse({ version: PRODUCTION_EVIDENCE_VERSION, token });
@@ -99,14 +102,17 @@ function validateClaimsBinding(claims, binding, now) {
 }
 /**
  * Reviewed roots authenticate probe facts; this result cannot substitute for workload admission.
- * The default schema is the strict observed shape; a probe owner can supply its own shape for claims
- * that Google omits on non-compliant workloads, but authentication and binding are always enforced here.
+ * Only the contract owner's probe shape may relax missing signature/support arrays. Caller schemas
+ * can impose stricter validation, but freshness, binding, issuer and all other claim rules stay fixed.
  */
 export async function observeGoogleEvidence(token, binding, roots, now = Math.floor(Date.now() / 1000), claimsSchema = observedAttestationClaims) {
     const payload = await authenticate(token, binding, roots, now);
     try {
-        const claims = claimsSchema.parse(JSON.parse(payload.toString("utf8")));
+        const rawClaims = JSON.parse(payload.toString("utf8"));
+        const claims = probeAttestationClaims.parse(rawClaims);
         validateClaimsBinding(claims, binding, now);
+        // Isolate even passthrough fields from caller mutation and discard any rewritten parser output.
+        claimsSchema.parse(structuredClone(rawClaims));
         return { claims };
     }
     catch {

package/dist/gatekeeper/trust/policy.js

@@ -1,3 +1,4 @@
+import { enginePin } from "../../contract/engine.js";
 import { X509Certificate } from "node:crypto";
 import { z } from "zod";
 import { hardwareModels } from "./hardware.js";
@@ -30,7 +31,9 @@ export const workloadPolicy = z.object({
 }).strict();
 const productionTrust = workloadPolicy.extend({
     imageDigests: z.array(z.string().regex(/^sha256:[0-9a-f]{64}$/)).min(1),
-});
+    engineReleases: z.array(z.strictObject({ imageDigest: z.string().regex(/^sha256:[0-9a-f]{64}$/), engine: enginePin })).min(1).optional(),
+}).refine(value => !value.engineReleases || value.engineReleases.every(release => value.imageDigests.includes(release.imageDigest)) &&
+    new Set(value.engineReleases.map(release => release.imageDigest)).size === value.engineReleases.length, "Engine release image differs");
 export function validateWorkloadPolicy(value) {
     return workloadPolicy.parse(value);
 }

package/dist/gatekeeper/trust/schema.js

@@ -0,0 +1,4 @@
+import { z } from "zod";
+import { hardwareModels } from "./hardware.js";
+export const hash = z.string().regex(/^[0-9a-f]{64}$/);
+export const workloadHardware = z.enum(hardwareModels);

package/dist/transport/kms.js

@@ -0,0 +1,25 @@
+const maxBytes = 64 * 1024;
+export function kmsKeyName(value) {
+    if (!/^projects\/[a-z][a-z0-9-]{4,62}\/locations\/[a-z0-9-]+\/keyRings\/[A-Za-z0-9_-]+\/cryptoKeys\/[A-Za-z0-9_-]+$/.test(value)) {
+        throw new Error("Invalid KMS key configuration");
+    }
+    return value;
+}
+export function kmsKeyVersionName(value) {
+    kmsKeyForVersion(value);
+    return value;
+}
+export function kmsKeyForVersion(value) {
+    const match = /^(.*)\/cryptoKeyVersions\/[1-9][0-9]*$/.exec(value);
+    if (!match)
+        throw new Error("Invalid KMS key configuration");
+    return kmsKeyName(match[1]);
+}
+export function kmsBase64(value) {
+    if (typeof value !== "string" || value.length < 4 || value.length > maxBytes)
+        throw new Error();
+    const bytes = Buffer.from(value, "base64");
+    if (bytes.toString("base64") !== value)
+        throw new Error();
+    return bytes;
+}

package/package.json

@@ -1,6 +1,8 @@
 {
   "name": "@counterfact-labs/cli",
-  "version": "0.2.4",
+  "version": "0.2.5",
+  "homepage": "https://counterfactlabs.com",
+  "relaySource": "https://github.com/counterfact-labs/sealed-relay",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -21,7 +23,6 @@
     "test": "tsx --test ${TEST_SHARD:+--test-shard=$TEST_SHARD} --test-concurrency=4 --test-timeout=600000 \"core/**/*.test.ts\" \"adapters/**/*.test.ts\" \"cli/**/*.test.ts\" \"bench/**/*.test.ts\" \"bundle/**/*.test.ts\" \"contract/**/*.test.ts\" \"gatekeeper/**/*.test.ts\" \"relay/**/*.test.ts\" \"transport/**/*.test.ts\" \"packages/core/src/**/*.test.ts\" \"packages/core/*.test.ts\" \"packages/setup-pings/src/**/*.test.ts\" \"scripts/**/*.test.ts\"",
     "build:core": "npm run build --workspace @counterfact-labs/analysis-core",
     "build:setup-pings": "npm run build --workspace @counterfact-labs/setup-pings",
-    "prepare": "npm run build:core && npm run build:setup-pings",
     "pretest": "npm run build:core && npm run build:setup-pings",
     "release:core": "tsx scripts/release-core.ts",
     "build:cli": "npm run build:setup-pings && tsx scripts/build-cli.ts",
@@ -44,7 +45,7 @@
     "tsx": "4.23.15",
     "typescript": "6.0.3",
     "typescript-eslint": "8.64.0",
-    "@counterfact-labs/analysis-core": "0.8.0",
+    "@counterfact-labs/analysis-core": "0.8.2",
     "@counterfact-labs/setup-pings": "0.1.0"
   },
   "workspaces": [

package/dist/adapters/quality.js

@@ -1,6 +0,0 @@
-import { readFindingQualityConfig as readSharedConfig } from "../analysis-core/analysis/finding-quality/config.js";
-import { readableRequestTools } from "./instructions.js";
-// Local startup has one provider and has not approved recall or imported code evidence.
-export function readLocalQualityConfig(settings, tools = readableRequestTools()) {
-    return readSharedConfig(settings, tools, { codeInputs: false, recall: false, secondOpinion: false });
-}

package/dist/adapters/report.js

@@ -1,29 +0,0 @@
-import { rankFindings } from "../analysis-core/analysis/finding-quality/policy.js";
-import { attachHeadlineResults } from "../analysis-core/analysis/headlines/attachment.js";
-/** The local view keeps presentation ranking and reading diagnostics beside the shared result. */
-export function buildLocalReport(repoKey, result, state) {
-    const quality = result.findingQuality;
-    const checked = { ...(state.findingCheck?.state?.result ?? { kept: result.findings, dropped: [], warnings: [] }) };
-    // Source explanations refresh the audit without changing the saved checker decision.
-    if (quality?.assessments && checked.qualityAudit)
-        checked.qualityAudit = {
-            coverage: quality.coverage ?? [], verdicts: quality.verdicts ?? [], assessments: quality.assessments,
-            ...(quality.shadow ? { shadow: quality.shadow } : {}),
-        };
-    const attached = attachHeadlineResults(result.findings, result.structures, result.findingHeadlines ?? [], result.findingHeadlineDiagnostics);
-    const wording = new Map(attached.rows.filter(row => row.target === "finding")
-        .map(row => [row.index, { headline: row.headline, ifLeft: row.ifLeft }]));
-    const structureWording = new Map(attached.rows.filter(row => row.target === "structure")
-        .map(row => [row.index, { headline: row.headline, ifLeft: row.ifLeft }]));
-    const structures = structureWording.size ? result.structures.map((proposal, index) => structureWording.has(index)
-        ? { ...proposal, ...structureWording.get(index) } : proposal) : result.structures;
-    const findings = wording.size
-        ? result.findings.map((finding, index) => wording.has(index) ? { ...finding, ...wording.get(index) } : finding)
-        : result.findings;
-    const ranked = state.findingQuality?.config.switches.ranking ? rankFindings(findings, quality?.assessments ?? []) : undefined;
-    return { repoKey, findings: ranked?.ordered ?? findings, structures, graph: result.graph, warnings: result.warnings,
-        ...(attached.diagnostics ? { findingHeadlineDiagnostics: attached.diagnostics } : {}),
-        skippedFiles: state.inspectPlan?.skipped ?? [], passes: state.inspectPlan?.passes.length ?? 1, findingCheck: checked,
-        ...(ranked ? { ranking: { defaultIds: ranked.defaultIds, hiddenIds: ranked.hiddenIds, emptyMessage: ranked.emptyMessage } } : {}),
-    };
-}

package/dist/analysis-core/analysis/analysis-flags.js

@@ -1 +0,0 @@
-import{a,b,c}from"../chunks/OFBJNHC6.js";export{c as analysisFlagsOf,a as readAnalysisFlags,b as readParallelPassSettings};

package/dist/analysis-core/analysis/finding-quality/config.js

@@ -1 +0,0 @@
-import{n as a,o as b,p as c,q as d,r as e,s as f}from"../../chunks/DRGDIIFA.js";import"../../chunks/6YCABS5T.js";import"../../chunks/SL27GMEN.js";import"../../chunks/3CKW5JIF.js";import"../../chunks/STZOC7LN.js";import"../../chunks/MJGB25S5.js";import"../../chunks/UEWL3GMQ.js";import"../../chunks/OFBJNHC6.js";import"../../chunks/3227KXHF.js";import"../../chunks/HPIAEQHE.js";import"../../chunks/74FPPPIG.js";import"../../chunks/EH3QQ3T4.js";import"../../chunks/JKWTHRUR.js";import"../../chunks/FSLWD2PE.js";import"../../chunks/JF4GYMOZ.js";import"../../chunks/3GUKUEEJ.js";import"../../chunks/T5TREZCQ.js";import"../../chunks/724WZMYW.js";export{f as assertFindingQualityPrompts,b as findingAnalysisTemplate,e as findingQualityConfigOf,a as findingQualityPromptNames,c as plannedFindingQualityCalls,d as readFindingQualityConfig};

package/dist/analysis-core/analysis/finding-quality/policy.js

@@ -1 +0,0 @@
-import{i as a,j as b}from"../../chunks/MXXNED6N.js";import"../../chunks/U5HOEVPE.js";import"../../chunks/HPIAEQHE.js";import"../../chunks/74FPPPIG.js";import"../../chunks/EH3QQ3T4.js";import"../../chunks/JKWTHRUR.js";import"../../chunks/FSLWD2PE.js";import"../../chunks/JF4GYMOZ.js";import"../../chunks/3GUKUEEJ.js";import"../../chunks/T5TREZCQ.js";import"../../chunks/724WZMYW.js";export{a as assessFindings,b as rankFindings};

package/dist/analysis-core/analysis/headlines/attachment.js

@@ -1 +0,0 @@
-import{a,b,c,d}from"../../chunks/O652FQQH.js";import"../../chunks/57M4OQJM.js";import"../../chunks/IBCFGUHI.js";import"../../chunks/HPIAEQHE.js";import"../../chunks/74FPPPIG.js";import"../../chunks/EH3QQ3T4.js";import"../../chunks/JKWTHRUR.js";import"../../chunks/FSLWD2PE.js";import"../../chunks/JF4GYMOZ.js";import"../../chunks/3GUKUEEJ.js";import"../../chunks/T5TREZCQ.js";import"../../chunks/724WZMYW.js";export{d as attachHeadlineResults,c as attachHeadlineRows,a as headlineTargetFingerprint,b as headlineWordingAt};

package/dist/analysis-core/analysis/headlines/input.js

@@ -1 +0,0 @@
-import{a as b,b as c}from"../../chunks/FTODBFQW.js";import{c as a}from"../../chunks/ZAA44GPI.js";import"../../chunks/3227KXHF.js";import"../../chunks/O652FQQH.js";import"../../chunks/57M4OQJM.js";import"../../chunks/IBCFGUHI.js";import"../../chunks/HPIAEQHE.js";import"../../chunks/74FPPPIG.js";import"../../chunks/EH3QQ3T4.js";import"../../chunks/JKWTHRUR.js";import"../../chunks/FSLWD2PE.js";import"../../chunks/JF4GYMOZ.js";import"../../chunks/3GUKUEEJ.js";import"../../chunks/T5TREZCQ.js";import"../../chunks/724WZMYW.js";export{b as buildHeadlineInput,c as headlineInputHash,a as headlineRequest};

package/dist/analysis-core/chunks/3CKW5JIF.js

@@ -1 +0,0 @@
-import{a as C,b as F}from"./STZOC7LN.js";import{a as c}from"./MJGB25S5.js";import{z as t}from"zod";var O=Object.freeze(["CF_MULTI_PASS","CF_SPLIT_CHECK","CF_FINDING_CHECK","CF_SOURCE_NOTES","CF_PARALLEL_PASSES","CF_PASS_CONCURRENCY","CF_PARALLEL_SCOPE_CHECK","CF_FINDING_QUALITY","CF_FINDING_FULL_CONTEXT","CF_FINDING_PRECISION_RULES","CF_PROMPT_AGREE","CF_FINDING_SECOND_OPINION","CF_FINDING_RANKING","CF_FINDING_SEMANTIC_MATCHING","CF_FINDING_CODE_INPUTS","CF_FINDING_RECALL","CF_FINDING_RECALL_VARIANT","CF_FINDING_SECOND_OPINION_MODEL","CF_FINDING_SECOND_OPINION_PROVIDER","CF_FIX_EXPECTED_OUTCOME","CF_UNTRUSTED_CONTENT_CHECK","CF_FINDING_BETTER_AS_CODE","CF_CODE_AGENTS","CF_CODE_AGENTS_MODEL","CF_FINDING_DEDUPE","CF_ANALYSIS_IMPORTED_AGENTS","CF_RECALL_SIGNALS","CF_READING_NOTE_AGENT_ONLY","CF_SPLIT_HELPER_TOOLS","CF_CODE_PROMPT_LOADERS","CF_CODE_PROMPT_FUNCTIONS","CF_READING_PRIORITY","CF_LOCAL_SYMLINK_GUARD","CF_IMPORT_EXAMPLE_FILTER","CF_IMPORT_OUTSIDE_LOADERS","CF_SECRET_SCAN","CF_RESPECT_GITIGNORE","CF_IMPORT_COVERAGE","CF_IMPORT_MANIFEST","CF_IMPORT_SCOPED_SCAN","CF_IMPORT_INCLUDE_EXAMPLES","CF_IMPORT_WEAK_CODE_FALLBACK","CF_REFUSE_TOO_LARGE","CF_FINDING_HEADLINES","CF_IMPORT_LAYOUTS","CF_DISCOVERY_SKILLS","CF_IMPORT_CALLS","CF_PROMPT_CACHE","CF_MODEL_READER","CF_LEGACY_TOOL_LISTS"]),a=O.filter(e=>e!=="CF_IMPORT_OUTSIDE_LOADERS"&&e!=="CF_SECRET_SCAN"&&e!=="CF_RESPECT_GITIGNORE"&&e!=="CF_IMPORT_COVERAGE"&&e!=="CF_IMPORT_MANIFEST"&&e!=="CF_IMPORT_SCOPED_SCAN"&&e!=="CF_IMPORT_INCLUDE_EXAMPLES"&&e!=="CF_IMPORT_WEAK_CODE_FALLBACK"&&e!=="CF_REFUSE_TOO_LARGE");function N(e,_="request"){return Object.freeze(Object.fromEntries((_==="saved"?O:a).filter(i=>Object.hasOwn(e,i)).map(i=>[i,e[i]])))}var p=t.partialRecord(t.enum(a),t.string()),E=t.lazy(()=>t.union([t.string(),t.number(),t.boolean(),t.null(),t.array(E),t.record(t.string(),E)])),l=t.object({data:t.record(t.string(),E),settings:p,maxInputBytes:t.number().int().positive().optional()}).strict(),S=t.string().min(1).max(128).regex(/^[a-zA-Z0-9][a-zA-Z0-9._:-]*$/),T=t.object({maxTokens:t.number().int().positive().optional(),effort:t.enum(["low","medium","high","max"]).optional(),thinking:t.literal("disabled").optional(),promptCache:t.boolean().optional()}).strict(),R=t.object({template:t.string().min(1),inputs:l,answerFormat:t.string().min(1),model:S,limits:T.optional()}).strict();function P(e,_={},o){let i={data:e.inputs,settings:N(_),...o===void 0?{}:{maxInputBytes:o}};return R.parse({...e,answerFormat:Object.hasOwn(r,e.template)?A(e.template,e.answerFormat,_):e.answerFormat,limits:{...e.limits,promptCache:c(_,{template:e.template},e.model).enabled},inputs:JSON.parse(JSON.stringify(i))})}var n=(e,..._)=>Object.freeze({role:e,answerFormats:Object.freeze(_)}),s=F().map(e=>e.name),r=Object.freeze({"derive-findings":n("required",...s),"derive-findings-legacy":n("required",...s),"derive-findings-no-outcome":n("required",...s),"derive-findings-legacy-no-outcome":n("required",...s),"benchmark-judge":n("required","judge"),"judge-code-prompt":n("optional","codeJudge"),"derive-structure":n("optional","structures"),"structure-recheck":n("optional","recheck"),"derive-shape":n("optional","shape"),"scope-items":n("optional","structureScope"),"scope-findings":n("optional","scope"),"check-findings":n("optional","check"),"check-findings-precision-v1":n("optional","check"),"second-opinion":n("optional","opinion"),"explain-sources":n("optional","sourceNotes"),"finding-headlines":n("optional","findingHeadlines")});function D(){return r}function f(e,_,o){let i=o??(e==="derive"?"derive-findings":"check-findings");if(!Object.keys(r).filter(I=>r[I].answerFormats.includes(e==="derive"?"findings":"check")).includes(i))throw new Error("Unknown analysis template");return e==="derive"&&!C(_).switches.expectedOutcome&&!i.endsWith("-no-outcome")?`${i}-no-outcome`:i}function A(e,_,o){let i=_==="findings"?C(o).name:_;if(!Object.hasOwn(r,e)||!r[e].answerFormats.includes(i))throw new Error("Unsupported template answer format");return i}function g(e,_,o){if(o(_),!Object.hasOwn(r,e)||r[e].role!=="optional")throw _}export{O as a,N as b,l as c,S as d,T as e,R as f,P as g,D as h,f as i,A as j,g as k};

package/dist/analysis-core/chunks/6YCABS5T.js

@@ -1 +0,0 @@
-var n=Object.freeze({"benchmark-judge":"score_match","judge-code-prompt":"judge-code-prompt","derive-findings":"derive_findings","derive-findings-legacy":"derive_findings","derive-findings-no-outcome":"derive_findings","derive-findings-legacy-no-outcome":"derive_findings","derive-structure":"derive_structure","structure-recheck":"structure_recheck","derive-shape":"derive_shape","scope-items":"scope_check_structure","scope-findings":"scope_check","explain-sources":"explain_sources","finding-headlines":"finding_headlines","check-findings":"finding_check","check-findings-precision-v1":"finding_check","second-opinion":"finding_second_opinion"});function c(e){if(!Object.hasOwn(n,e))throw new Error("Unknown analysis template");return n[e]}function s(e){return Object.fromEntries(Object.entries(e).map(([i,r])=>[i,{...r,route:c(i)}]))}export{c as a,s as b};

package/dist/analysis-core/chunks/7OYIBWX3.js

@@ -1 +0,0 @@
-import{h as G}from"./NCWEOJVJ.js";import{Aa as $,Ba as P,Ca as w,Fa as M,Ga as y,Ta as D,a as l,b as N,e as T,ga as E,o as C,qa as I,u as R,wa as F,za as _}from"./HPIAEQHE.js";import{a as b,c as x}from"./T5TREZCQ.js";var k="Some of this agent's files weren't read, so findings may be missing.";var B=r=>r.CF_READING_PRIORITY!=="0";var U=new Set(["system prompt","soul","knowledge","config","tools","mcp"]);function L(r){let t=new Set;for(let s of r.nodes)for(let f of s.files??[])U.has(f.role)&&t.add(f.path);let n=new Set(r.edges.filter(s=>s.kind==="delegates").map(s=>s.to));for(let s of r.nodes)n.has(s.id)&&s.sourceRef&&t.add(s.sourceRef.path);return t}function V(r){return new Set([...r.nodes,...r.edges].flatMap(t=>t.sourceRef?[t.sourceRef.path]:[]))}var p=6e4,j=r=>{if(r.length<=p)return r;let t=r.endsWith(E)?E:"";return(t?r.slice(0,-t.length):r).slice(0,p)+t};function Z(r,t){let n=[...r].filter(s=>t[s]!==void 0&&j(t[s])!==t[s]).sort();return n.length===0?null:`${n.length} core file${n.length===1?" was":"s were"} longer than ${p/1e3} KB, so only the first ${p/1e3} KB ${n.length===1?"was":"were"} read: ${n.join(", ")}`}var A=r=>r.split("/").slice(0,-1).join("/"),Y=/(agent|prompt|tool|llm|model)/i,z=2.5;function K(r,t){if(!B(r))return{enabled:!1,tierOf:()=>6};if(t.repos?.some(e=>e.kind==="github"&&b(e.root)))return v(r,t,t.repos);let n=t.scopes??(T(r)?G(r,t.paths):void 0),s=t.graph?L(t.graph):new Set,f=new Set(t.graph?.nodes.flatMap(e=>(e.files??[]).filter(o=>o.role==="code"&&l(o.path)).map(o=>o.path))??[]),i=new Set(t.graph?.nodes.flatMap(e=>(e.files??[]).filter(o=>o.role==="system prompt").map(o=>o.path))??[]),a=e=>N(e)&&(I.includes(e.split("/").pop().toLowerCase())||/(^|\/)system_prompt_[^/]+\.md$/i.test(e)||y.test(e)),c=e=>{if(s.has(e))return 1;if(f.has(e))return 2;let o=P(r,e,n),d=R(o,{nested:!0});if(d?.reference)return 5;if(d?.definition||F.test(o))return 4;if(d||/(^|\/)(docs?|references)\//i.test(o)||$.test(e.split("/").pop()))return 5;if(_(o)||w(r,e,n)&&_(e.split("/").pop())||a(e))return 1;if(l(e)){if(Y.test(e))return z;if(M.test(e))return 3}return 6};for(let e of t.paths)c(e)===1&&a(e)&&i.add(e);let m=[...i].flatMap(e=>{let o=A(e);return[o,...o?[A(o)]:[]]}),h=e=>l(e)&&m.some(o=>A(e)===o),u=new Map(t.paths.map(e=>{let o=c(e);return[e,o>2&&h(e)?2:o]})),g=[...u].filter(([e,o])=>o<=2&&l(e)).map(([e])=>e),O=D(Object.fromEntries(g.flatMap(e=>t.files?.[e]===void 0?[]:[[e,t.files[e]]])),t.paths);for(let e of O)l(e)&&!R(P(r,e,n),{nested:!0})&&(u.get(e)??6)>2&&u.set(e,2);return{enabled:!0,tierOf:e=>u.get(e)??c(e)}}function v(r,t,n){let s=new Map;for(let f of n){let i=f.kind==="github"?f.root:void 0,a=t.paths.filter(e=>f.files?.[e]!==void 0&&!s.has(e)),c=e=>x(e,i)??(f.files?.[e]!==void 0?e:null),m=e=>{let o=e?c(e.path):null;return o===null?null:{path:o}},h=t.graph&&{nodes:t.graph.nodes.map(e=>({...e,sourceRef:m(e.sourceRef),files:e.files?.flatMap(o=>{let d=c(o.path);return d===null?[]:[{...o,path:d}]})})),edges:t.graph.edges.map(e=>({...e,sourceRef:m(e.sourceRef)}))},u=a.flatMap(e=>{let o=c(e);return o===null?[]:[o]}),g=Object.fromEntries(a.flatMap(e=>{let o=c(e);return o===null||t.files?.[e]===void 0?[]:[[o,t.files[e]]]})),O=K(r,{paths:u,files:g,graph:h});for(let e of a)s.set(e,O.tierOf(c(e)??e))}return{enabled:!0,tierOf:f=>s.get(f)??6}}function H(r,t){return r.enabled?t.filter(n=>["too-large","total","allowance"].includes(n.reason)&&r.tierOf(n.path)<3).map(n=>n.path):[]}function W(r){return r.slice(0,3)}function q(r,t=!1){let n=W(r);if(!n.length)return;let s=t?". "+k:", so some findings may be missing";return`${n.join(", ")} ${n.length===1?"was":"were"} left out${s}`}function ue(r,t){return q(H(r,t))}function de(r,t){return r.enabled&&r.tierOf(t)<3}function me(r,t,n){let s=C.sourceFetch.codeFileBytes;return r.enabled&&r.tierOf(t)<3&&l(t)&&n>s?{size:s,readBytes:s}:{size:n}}function pe(r,t){return r.enabled&&r.tierOf(t)<3&&l(t)}function S(r){return r.split("/").length-1}function he(r,t,n){return w(r,t,n)?0:M.test(t)?1+Math.min(S(t),3)/10:S(t)<=2?2:S(t)<=4?3:4}function ge(r,t){return(r.tier??0)-(t.tier??0)||r.score-t.score||r.size-t.size}function Oe(r,t,n,s){return[...r].sort((f,i)=>(s?.enabled?s.tierOf(f)-s.tierOf(i):0)||Number(n.has(i))-Number(n.has(f))||t[f].length-t[i].length||(f<i?-1:1))}function Re(r,t,n,s){return[...r].sort((f,i)=>(s?.enabled?s.tierOf(f.path)-s.tierOf(i.path):0)||Number(t.has(i.path))-Number(t.has(f.path))||Number(n.has(i.path))-Number(n.has(f.path))||f.text.length-i.text.length)}export{B as a,L as b,V as c,j as d,Z as e,K as f,H as g,W as h,q as i,ue as j,de as k,me as l,pe as m,he as n,ge as o,Oe as p,Re as q};

package/dist/analysis-core/chunks/DRGDIIFA.js

@@ -1 +0,0 @@
-import{a as U}from"./6YCABS5T.js";import{c as V}from"./SL27GMEN.js";import{i as b,j as v}from"./3CKW5JIF.js";import{c as y}from"./MJGB25S5.js";import{a as K}from"./OFBJNHC6.js";import{a as u,b as w}from"./3227KXHF.js";import{ub as Y}from"./HPIAEQHE.js";import{c as k,f as M}from"./JKWTHRUR.js";var l=u.chat,s=8,I=1,W=40,N=6e4,S=16e3,Q=8e4,f=4e3,q=1536,R=8192,B=1024;function h(e){return R+e*q+B}function A(e,t="legacy"){return t==="whole-file"?N+Q+f*e+4e3*4:N+(S+f)*e+4e3*2}function pe(e,t,o,n,c="legacy"){if(!o||t===0)return null;let r=Math.ceil(t/s),i=1+I,p=h(t)+(R+B)*(r-1),_={template:n};if(c==="whole-file"){let F=Math.floor(t/s),d=t%s,a=M(A(s,c))*F+(d?M(A(d,c)):0);return y(e,_,"Double-check findings",l,a*i,p*i)}let C=N*r+(S+f)*t;return y(e,_,"Double-check findings",l,(M(C)+4e3*r)*i,p*i)}var Ce=8e5;function L(e,t,o,n,c,r,i){return{routeId:U(t),templateId:t,answerFormatId:v(t,o,e),model:n,calls:c,maxInputBytes:r,maxInputTokens:2e5,maxOutputTokens:i??V({model:n})}}function X(e,t){let o=e.CF_FINDING_QUALITY==="1",n=o&&e.CF_FINDING_FULL_CONTEXT==="1",c=o&&e.CF_FINDING_PRECISION_RULES==="1",r=t?.check.name??(c?"check-findings-precision-v1":"check-findings");return{enabled:o,fullContext:n,precisionRules:c,prompts:{derive:t?.derive.name??"derive-findings-legacy",check:r==="check-findings-legacy"?"check-findings":r}}}function $(e){return X({},e.prompts).prompts}function G(e,t,{enabled:o,prompts:n}){return b(e,t,o?n[e]:void 0)}function Ae(e,t,o){return G(e,t,{enabled:o?.switches.enabled??!1,prompts:X({},o?.prompts).prompts})}function Fe(e,t,o,n){let c=K(e),r=X(e),{fullContext:i}=r,p=G("derive",e,r),_=G("check",e,r),C=i?"whole-file":"legacy";return{findings:o,derive:L(e,p,"findings",u.generate,t,n),check:c.findingCheck?L(e,_,"check",l,Math.ceil(o/s)*(I+1),Math.max(n,A(s,C)),h(s)):null}}function g(e){if(e&&typeof e=="object"){for(let t of Object.values(e))g(t);Object.freeze(e)}return e}function ee(e,t,o={}){let{enabled:n,fullContext:c,precisionRules:r,prompts:i}=X(e),p=m=>n&&e[m]==="1",_=p("CF_FINDING_SECOND_OPINION"),C=p("CF_FINDING_RANKING"),F=n&&e.CF_FINDING_SEMANTIC_MATCHING!=="0",d=o.codeInputs!==!1&&n&&e.CF_FINDING_CODE_INPUTS!=="0",a=[],x=e.CF_FINDING_RECALL_VARIANT,D=o.recall!==!1&&p("CF_FINDING_RECALL")&&(x==="request-18"||x==="two-sweeps")?x:"off";o.recall!==!1&&p("CF_FINDING_RECALL")&&D==="off"&&a.push("Recall was skipped: no supported variant was selected.");let P=null,H=null;if(o.recall===!1&&e.CF_FINDING_RECALL==="1"&&a.push("Recall isn't available in local checks yet, so CF_FINDING_RECALL has no effect."),o.codeInputs===!1&&e.CF_FINDING_CODE_INPUTS==="1"&&a.push("Code evidence isn't available in local checks yet, so CF_FINDING_CODE_INPUTS has no effect."),_&&o.secondOpinion===!1&&a.push("Second opinion was skipped: local analysis supports Anthropic only."),_&&o.secondOpinion!==!1){let m=e.CF_FINDING_SECOND_OPINION_MODEL??"",E=Object.hasOwn(k,m)?k[m]:void 0,O=k[l];E&&E.provider===e.CF_FINDING_SECOND_OPINION_PROVIDER&&E.provider!==O.provider&&E.input<=O.input&&E.output<=O.output&&(E.input<O.input||E.output<O.output)?(P=m,H=E.provider):a.push("Second opinion was skipped: configure a priced, cheaper model from a different provider.")}return g({ruleVersion:n?"precision-v1":"legacy",switches:{enabled:n,fullContext:c,precisionRules:r,secondOpinion:_,ranking:C,semanticMatching:F,codeInputs:d,recall:D!=="off"},prompts:{derive:t.promptVersion(i.derive,e),check:t.promptVersion(i.check,e)},models:{derive:u.generate,check:l,scope:u.mechanical,secondOpinion:P},caps:{coreBytes:N,siteBytes:S,findingTextBytes:f,siteWindowLines:W,citedBatchBytes:c?8e4:0,passBytes:15e4,passContextBytes:6e4,maxPasses:4,passFindings:D==="request-18"?18:Y,totalFindings:24,deriveOutputTokens:w,checkBatchSize:s,checkOutputTokens:h(s),checkMaxRetries:I,checkOverheadTokens:4e3,secondOpinionBatchSize:4,secondOpinionInputBytes:A(4)+(c?8e4:0),secondOpinionOutputTokens:2048,secondOpinionMaxRetries:I},recallVariant:D,displayPolicyVersion:C?"support-v1":"legacy",meaningMatchingVersion:F?"meaning-v1":"legacy",codeInputScopeVersion:d?"owned-code-v1":"legacy",secondOpinionProvider:H,diagnostics:a})}function De(e,t){return t?g(structuredClone(t)):ee({},e)}function ke(e,t,o={}){let n=$(e);e.switches.enabled&&t.assertPromptVersions([{...e.prompts.derive,name:n.derive},{...e.prompts.check,name:n.check}],o)}export{l as a,s as b,I as c,W as d,N as e,S as f,Q as g,f as h,h as i,A as j,pe as k,Ce as l,L as m,$ as n,Ae as o,Fe as p,ee as q,De as r,ke as s};

package/dist/analysis-core/chunks/FTODBFQW.js

@@ -1 +0,0 @@
-import{a as p}from"./O652FQQH.js";import{b as l}from"./57M4OQJM.js";import{createHash as d}from"node:crypto";function u({repo:o,body:r}){let[t,...i]=r.evidence,n=r.split,s=e=>e.map(a=>({path:a.path??null,startLine:a.startLine,endLine:a.endLine}));return{kind:"structure",impact:r.kind,cause:r.cause,category:null,question:null,fixSummaries:[],site:t?{repo:o,path:t.path,line:t.line}:null,excerpt:t?.excerpt??null,otherSites:i.map(e=>({repo:o,path:e.path,line:e.line,excerpt:e.excerpt})),structure:{title:r.title,subKind:r.subKind,files:r.files.map(e=>({path:e.path,action:e.action,role:e.role,unit:e.unit,loadMode:e.loadMode,loadVia:e.loadVia,purpose:e.purpose})),segments:r.segments.map(e=>({path:e.path,startLine:e.startLine,endLine:e.endLine,to:e.to,disposition:e.disposition,into:e.into?{path:e.into.path,line:e.into.line}:null,reason:e.reason})),reorder:r.reorder?{path:r.reorder.path,startLine:r.reorder.startLine,endLine:r.reorder.endLine,steps:r.reorder.steps.map(e=>({from:e.from,reason:e.reason}))}:null,toolMoves:r.toolMoves.map(e=>({tool:e.tool,fromUnit:e.fromUnit,toUnit:e.toUnit,reason:e.reason})),split:n?{frontDoor:{job:n.frontDoor.job,skills:[...n.frontDoor.skills]},subAgents:n.subAgents.map(e=>({job:e.job,description:e.description,path:e.path,handoff:e.handoff??null,skills:e.skills.map(a=>({from:a.from,to:a.to})),tools:[...e.tools],movedKnowledge:s(e.movedKnowledge),neededKnowledge:s(e.neededKnowledge)}))}:null}}}function x(o,r=[]){return{evidence:[...o.map((t,i)=>({key:`f${i}`,kind:"finding",impact:t.kind,structure:null,cause:t.cause,category:t.category??null,question:t.question,site:t.site?{repo:t.siteRepo,path:t.site.path,line:t.site.line}:null,excerpt:t.excerpt,otherSites:t.otherSites.map(n=>({repo:n.repo,path:n.path,line:n.line,excerpt:n.excerpt})),fixSummaries:t.fixes.flatMap(n=>typeof n.summary=="string"&&n.summary.trim()?[n.summary]:[])})),...r.map((t,i)=>({key:`s${i}`,...u(t)}))],positions:[...o.map((t,i)=>({key:`f${i}`,target:"finding",index:i,fingerprint:p("finding",t)})),...r.map((t,i)=>({key:`s${i}`,target:"structure",index:i,fingerprint:p("structure",t)}))]}}function L(o,r){return d("sha256").update(l({batch:o,requestIdentity:r})).digest("hex")}export{x as a,L as b};